/*
 *  PPKeychain.m
 *  PigeonsFoundation
 *
 *  Created by Jacob Basham on 1/24/07.
 *  Copyright 2007, PaperPigeons.net
 *  All rights reserved.
 *
 *  Redistribution and use in source and binary forms, with or without 
 *  modification, are permitted provided that the following conditions 
 *  are met:
 *  1. Redistributions of source code must retain the above copyright 
 *     notice, this list of conditions and the following disclaimer.
 *	2. Redistributions in binary form must reproduce the above copyright 
 *	   notice, this list of conditions and the following disclaimer in 
 *	   the documentation and/or other materials provided with the distribution.
 *	3. Neither the name of PaperPigeons.net nor the names of its contributors 
 *	   may be used to endorse or promote products derived from this software 
 *	   without specific prior written permission.
 *
 *  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 
 *	"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 
 *	LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 
 *	FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 
 *	COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 
 *	INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 
 *	BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 
 *	LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 
 *	CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 
 *	LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING 
 *	IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
 *	POSSIBILITY OF SUCH DAMAGE.
 */

#import "PPKeychain.h"


@implementation PPKeychain

+ (int)version
{
	UInt32 version;
	SecKeychainGetVersion(&version);
	return (int)version;
}

+ (NSString *)genericPasswordForSource:(NSString *)source
	account:(NSString *)account
{
	OSStatus status;
	NSString * password;
	SecKeychainItemRef itemRef;
	
	status = SecKeychainFindGenericPassword (
		NULL,
		[source length],
		[source cStringUsingEncoding:NSUTF8StringEncoding],
		[account length],
		[account cStringUsingEncoding:NSUTF8StringEncoding],
		0,
		NULL,
		&itemRef
	);
	
	if (status == noErr) {
		SecKeychainAttribute attribute;
		SecKeychainAttributeList attributeList;
		UInt32 length;
		void * outData;
		
		attribute.tag = kSecAccountItemAttr;
		attribute.length = 0;
		attribute.data = NULL;
		
		attributeList.count = 1;
		attributeList.attr = &attribute;

		if (SecKeychainItemCopyContent(
			itemRef,
			NULL,
			&attributeList,
			&length,
			&outData)) {
				password = [NSString stringWithCString:outData 
								length:length];
				SecKeychainItemFreeContent(&attributeList, outData);
		}
	}
	
	return password;
}
	
+ (NSString *)internetPasswordForServer:(NSString *)server 
	domain:(NSString *)domain
	account:(NSString *)account
	path:(NSString *)path
	port:(int)port
	protocol:(SecProtocolType)protocol
	authenticationType:(SecAuthenticationType)authType
{
	OSStatus status;
	NSString * password;
	SecKeychainItemRef itemRef;
	
	status = SecKeychainFindInternetPassword(
		NULL,
		[server length],
		[server cStringUsingEncoding:NSUTF8StringEncoding],
		[domain length],
		[domain cStringUsingEncoding:NSUTF8StringEncoding],
		[account length],
		[account cStringUsingEncoding:NSUTF8StringEncoding],
		[path length],
		[path cStringUsingEncoding:NSUTF8StringEncoding],
		port,
		protocol,
		authType,
		0,
		NULL,
		&itemRef
	);
	
	if (status == noErr) {
		SecKeychainAttribute attribute;
		SecKeychainAttributeList attributeList;
		UInt32 length;
		void * outData;
		
		attribute.tag = kSecAccountItemAttr;
		attribute.length = 0;
		attribute.data = NULL;
		
		attributeList.count = 1;
		attributeList.attr = &attribute;

		if (SecKeychainItemCopyContent(
			itemRef,
			NULL,
			&attributeList,
			&length,
			&outData)) {
				password = [NSString stringWithCString:outData 
								length:length];
				SecKeychainItemFreeContent(&attributeList, outData);
		}
	}
	
	return password;
}

+ (void)setGenericPasswordForSource:(NSString *)source
	account:(NSString *)account
	password:(NSString *)password
{
	SecKeychainAddGenericPassword(
		NULL,
		[source length],
		[source cStringUsingEncoding:NSUTF8StringEncoding],
		[account length],
		[account cStringUsingEncoding:NSUTF8StringEncoding],
		[password length],
		[password cStringUsingEncoding:NSUTF8StringEncoding],
		NULL
	);
}

+ (void)setInternetPasswordForServer:(NSString *)server
	domain:(NSString *)domain
	account:(NSString *)account
	password:(NSString *)password
	path:(NSString *)path
	port:(int)port
	protocol:(SecProtocolType)protocol
	authenticationType:(SecAuthenticationType)authType
{
	SecKeychainAddInternetPassword(
		NULL,
		[server length],
		[server cStringUsingEncoding:NSUTF8StringEncoding],
		[domain length],
		[domain cStringUsingEncoding:NSUTF8StringEncoding],
		[account length],
		[account cStringUsingEncoding:NSUTF8StringEncoding],
		[path length],
		[path cStringUsingEncoding:NSUTF8StringEncoding],
		port,
		protocol,
		authType,
		[password length],
		[password cStringUsingEncoding:NSUTF8StringEncoding],
		NULL
	);
}

@end
